-
Notifications
You must be signed in to change notification settings - Fork 0
/
kaddlocalhostsrv
executable file
·61 lines (54 loc) · 1.5 KB
/
kaddlocalhostsrv
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
#!/bin/bash
[ -e /etc/krb5.d/kutils.conf ] && source /etc/krb5.d/kutils.conf
function usage {
echo "Usage: `basename $0` -s <service> [-k <keytab:/etc/krb5.keytab>] [-R <REALM>] [-p <policy>]"
}
required=1
required_provided=0
hostname=$(hostname)
keytab="/etc/krb5.keytab"
while getopts "s:k:R:p:h" option;
do
case ${option} in
s) #Required: Service identifier
service=${OPTARG}
required_provided=$(($required_provided+1));
;;
k) #Optional: Alternative keytab file
keytab=${OPTARG}
;;
R) #Optional: Defined Realm
realm=`echo ${OPTARG} | tr a-z A-Z`
;;
p) #Optional: User defined policy
policy=${OPTARG}
;;
h)
usage;
exit 0;
;;
*)
usage;
exit 1;
esac;
done
if [ ${required_provided} -lt ${required} ]; then
usage;
exit 1;
fi;
serviceLC=`echo ${service} | tr A-Z a-z`
serviceUC=`echo ${service} | tr a-z A-Z`
fqdnLC=`echo ${hostname} | tr A-Z a-z`
fqdnUC=`echo ${hostname} | tr a-z A-Z`
hostnameLC=`echo ${hostname} | awk -F. '{print $1}' | tr A-Z a-z`
hostnameUC=`echo ${hostnameLC} | tr a-z A-Z`
for s in "${serviceLC}" "${serviceUC}";
do
for p in "${fqdnLC}" "${fqdnUC}" "${hostnameLC}" "${hostnameUC}";
do
princ="${s}/${p}"
[ -n "${realm}" ] && princ="${princ}@${realm}";
${appDir}/kaddaddprinc -u "${princ}" -o "-randkey -policy ${policy:-${defaultServicePolicy}}"
${appDir}/kaddkeytab -u "${princ}" -k ${keytab}
done
done